Every database and warehouse Datost can query directly.
Datost runs live queries against the warehouses and databases you connect. Data stays in your systems — Datost pulls results only when answering a question.
If your database isn’t publicly reachable, install the Tunnel Agent in your VPC. Datost connects through the agent without you opening any inbound ports.
Always use a read-only database user for Datost. The product never needs write access.
Datost respects your org’s role-based access on top of database credentials — so individual users can only query tables their role allows, even if the underlying connection sees more.